agenttesla | ac92340b7c90c154fb183ae88c936899[.]bin | Triage

Sharing

General

Target

ac92340b7c90c154fb183ae88c936899.bin
Size

82KB
MD5

a9469714bcd3c59d13fb91821ea062e7
SHA1

0f6eed305c944ad027f1c1a174d054644b88289e
SHA256

4f173fa77a34ec65fe53edd86564df52ab0b0108ce91f7d4f161e36c1a24d62c
SHA512

2485ae5506d38a434fbf33d71a455661577199bd13e22119ff6066a736c093934a6033e9b00f52456988b1f09bfdae8e2be916c40d24e3b36a67e24d73113b3f
SSDEEP

1536:Q6vjXD7DSGEVt2W2U9VWd1Q3hMMzOjeADoXWskh84aOvpz1iR/FM8Uu4xjCffGVy:PjGGEVtx3I1QR1ijimjUOv1MRdyxW+7O

Score

10^/10

agenttesla

Malware Config

Extracted

Family

agenttesla

Credentials

Protocol: smtp
Host:
mail.worlorderbillions.top
Port:
587
Username:
[email protected]
Password:
=;=yKWThEGx-
Email To:
[email protected]

Signatures

Agenttesla family
agenttesla

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/b6febf9364b430f85d1a84ca321dd488abd2e95d0ab184779837fbd0527abf0f.exe

Files

ac92340b7c90c154fb183ae88c936899.bin
.zip

Password: infected
b6febf9364b430f85d1a84ca321dd488abd2e95d0ab184779837fbd0527abf0f.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 231KB - Virtual size: 230KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ